------- Additional Comments From law at redhat dot com 2005-01-17 20:45 -------
Subject: Re: [4.0 Regression] ICE with -O1
-funit-at-a-time
On Tue, 2005-01-11 at 11:14 +0000, jakub at gcc dot gnu dot org wrote:
> ------- Additional Comments From jakub at gcc dot gnu dot org 2005-01-11
> 11:14 -------
> tree-ssa-dom.c in this case uses a released SSA_NAME.
> The dom pass recorded a SSA_NAME X into another SSA_NAME (Y)'s SSA_NAME_VALUE,
> then tree_duplicate_bb called indirectly from thread_through_all_blocks
> marks X for rewrite and following rewrite_ssa_into_ssa releases X, but X's
> address is still in Y's SSA_NAME_VALUE. Later on when Y's SSA_NAME_VALUE is
> used, it references a released SSA_NAME and the compiler crashes.
Yea. I stumbled upon this before I went on vacation last week. I've
got a patch here that I'll get bootstrapped and regression tested.
jeff
--
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=19360
